How to connect to a splunk server and get the exported CSV

[zackh123]

I'm completely new to splunk and I'm pretty stuck so I'm sorry in advance if any of this is unclear.

How would I be able to connect to splunk server on the internet, and retrieve the exported data in a CSV?

Where I am at is...

splunk -uri https://splunk.website.cc -auth user, pass

Any help would be appreciated.

[yannK · Accepted solution]

• easy way : use the web interface and use the "export result"

• hard way : use the API to get the results in xml http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches

• and finally your method using the remote CLI, piping the result to a file in the correct format
  see http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/CLIsearchsyntax


splunk search "mysearch | table field1 field2 " -output csv -uri https://splunk.website.cc -auth user, pass > myresult.csv